Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa
File:                     673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa (raw, json)
Hash identifier:          y7zgdeyMNlKf8qBoKvk0K9JKbbgWym2E49fi3qXy/HM=
Subject key identifier:   2C:BA:07:47:F5:6C:93:DB:1A:7E:7B:C3:F1:FF:50:76:6D:CE:61:41
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584510BB696AA08212795FCA30C0
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa
Signing time:             Fri 01 Mar 2024 17:36:37 +0000
ROA not before:           Fri 01 Mar 2024 17:36:37 +0000
ROA not after:            Thu 30 May 2024 16:36:37 +0000
asID:                     16433
IP address blocks:        160.79.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:bb:69:6a:a0:82:12:79:5f:ca:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Mar  1 17:36:37 2024 GMT
            Not After : May 30 16:36:37 2024 GMT
        Subject: CN=6545bba4-b914-4fb3-817b-3daaf70cfe9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:e1:f7:91:52:94:91:fb:c4:f3:1b:2c:76:
                    e3:4e:71:10:bb:89:5e:fc:64:0f:67:c0:04:01:ea:
                    b0:79:05:c6:a5:7b:f0:ba:c8:28:a9:23:44:40:64:
                    f7:0e:a7:41:5b:83:fe:77:cc:4f:b5:87:9e:3d:db:
                    c0:8a:09:7a:33:b8:eb:cc:86:c6:f3:0d:c3:44:42:
                    0a:5e:d8:37:c8:e6:4e:e8:28:b1:7c:42:63:63:06:
                    73:34:4d:fc:71:95:ca:94:18:20:85:52:57:75:0b:
                    42:2b:9d:99:c8:d2:0e:1e:cf:c9:4f:1a:82:7e:59:
                    10:46:8f:4c:d3:c3:61:ba:e9:76:a0:4b:c7:f1:32:
                    29:4f:46:c4:ca:15:a9:90:cc:a9:25:a3:3e:e0:77:
                    04:d0:fc:23:3c:8e:4b:e0:f5:b7:04:90:e7:e1:8c:
                    59:3f:e8:05:a7:89:ca:fa:f6:ee:3c:56:2b:ff:12:
                    1f:22:68:93:f4:7a:76:8c:12:36:ca:b8:e1:0b:e3:
                    06:fd:67:d9:f1:9f:85:27:b8:06:d1:4b:e8:79:af:
                    d8:46:71:32:36:9a:40:7f:4c:ad:af:1e:67:7d:0e:
                    72:d4:0c:55:3f:19:c8:6c:cc:03:7b:3c:1d:d7:b7:
                    f7:1f:2f:9a:b6:45:6c:f1:b9:8a:20:16:8a:5d:81:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BA:07:47:F5:6C:93:DB:1A:7E:7B:C3:F1:FF:50:76:6D:CE:61:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/673fc5f1-83f6-37bf-a155-4138a1b7a18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:fe:c4:6c:49:b2:c7:24:d1:ac:68:12:1a:ad:af:0b:2e:
         76:fe:34:ab:87:b1:6d:04:35:86:7c:f9:10:24:40:4a:04:33:
         8a:14:f2:40:01:b0:f0:a3:bb:e3:d9:8f:46:1b:16:ec:56:67:
         95:1b:66:05:7e:85:1b:ab:5a:ad:1e:04:b7:84:c5:ad:ab:19:
         8f:30:c2:b0:40:84:d0:d1:fe:41:6d:7a:3e:0e:77:57:ed:4d:
         10:2f:4b:ce:c3:db:d3:f3:d2:a7:ad:2e:c5:79:80:92:50:3b:
         3b:98:fe:c3:e0:83:bd:63:66:6c:15:1c:e7:8b:72:06:74:73:
         62:2c:b2:f1:80:2d:35:21:6d:cd:16:e1:a8:c0:88:83:2c:cb:
         1f:9e:88:5c:52:da:e7:f8:77:6d:17:bd:68:c1:99:a5:61:6b:
         1b:df:3b:18:79:b5:11:b3:5f:d3:45:33:bf:02:90:5b:d4:a5:
         73:46:02:58:c9:67:ae:20:e7:1a:8d:16:82:0e:ea:d9:23:ff:
         69:56:a2:99:e8:52:01:f9:aa:cd:b8:db:c6:b0:fd:aa:59:71:
         43:b3:b7:f2:f1:57:b0:37:95:2a:2e:0a:a6:2c:07:0a:05:22:
         d8:82:88:75:ea:aa:2d:b1:30:e8:a2:42:ae:6b:fe:ed:af:74:
         86:3a:ba:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:38 2024 by rpki-client on console-ams.rpki-client.org